VBX Header Logo
Sign up

Privacy Policy

Last updated: December 4th, 2025

Bittreo Technologies Ltd., operating as VBX (“VBX”, “we”, “our”, or “us”), is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

By using our services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

We collect the following categories of personal information:

a. Account Information

  • Name, email address, and phone number
  • Residential address
  • Government-issued identification
  • Date of birth
  • Proof of address documents

b. Financial Information

  • Bank account details (for funding and withdrawals)
  • Source of funds information
  • Transaction history
  • E-transfer email address or Interac handle

c. Technical Information

  • IP address
  • Browser type, device identifier, and operating system
  • Usage logs and session data
  • Cookies and analytics identifiers

d. Compliance Data

  • Identity verification outcomes
  • Sanctions and risk-screening results
  • Blockchain wallet risk assessments
  • Other information required to meet anti-money laundering and counter-terrorist financing obligations

2. How We Use Your Information

We use personal information to:

  • Provide access to our services
  • Verify identity and meet legal and regulatory requirements
  • Detect, investigate, and prevent fraud or suspicious activity
  • Communicate with users regarding account activity, compliance requirements, and service-related notices
  • Process transactions and support settlement
  • Comply with applicable anti-money laundering and counter-terrorist financing laws
  • Send marketing communications, including product announcements, promotions, newsletters, and service updates (with consent)
  • Request customer feedback or reviews through third-party review platforms

You may withdraw consent for marketing communications at any time. Withdrawal of marketing consent does not affect essential service or compliance-related communications.

3. Who We Share Information With

We may share personal information with the following categories of third parties, strictly as required to operate our services:

  • Identity verification service providers
  • Compliance and risk-screening service providers
  • Banking, payment, and financial partners involved in funding or withdrawals
  • Liquidity and trade execution partners
  • Cloud hosting and infrastructure providers, including providers located in the United States
  • Analytics, advertising, and marketing technology providers
  • Third-party review platforms that process customer contact information for feedback requests

We may also disclose personal information to regulatory bodies or law enforcement only when required by applicable laws. This includes mandatory reporting obligations related to anti-money laundering and counter-terrorist financing requirements, as well as legally required inquiries, audits, or investigations.

We do not disclose information to regulators or law enforcement unless legally obligated to do so, and such disclosures are limited to what the law requires.

We do not sell or rent personal information.

4. Data Retention

We retain personal information only as long as necessary to:

  • Provide our services
  • Comply with legal and regulatory obligations, including mandatory recordkeeping requirements under Canadian anti-money laundering legislation (which may require retention for 5–7 years after account closure)
  • Respond to audits, investigations, or legal claims

Requests for deletion of personal information are subject to these legal retention requirements. Once information is no longer required, it is securely deleted or anonymized.

5. Data Storage & Security

Personal information is stored on secure, encrypted servers located in Canada and the United States. Information processed or stored outside Canada may be subject to the laws of those jurisdictions.

We use reasonable administrative, technical, and physical safeguards, including:

  • Encryption in transit and at rest
  • Access controls and logging
  • Periodic security reviews
  • Secure data handling procedures

No system is completely secure. You are responsible for protecting your login credentials and devices.

6. Cookies & Analytics

We use cookies and similar technologies to:

  • Maintain session security
  • Analyze website traffic and usage
  • Improve platform functionality and user experience

We use Google Analytics, which processes anonymized usage data and may store or process information outside Canada. Third-party cookies may also be used for analytics or marketing purposes.

You can control cookies through your browser settings or use Google’s analytics opt-out tools. Disabling cookies may limit certain features of the site.

7. Your Rights

Subject to applicable law, you may request:

  • Access to personal information we hold
  • Correction of inaccurate or incomplete information
  • Withdrawal of consent for marketing communications
  • Deletion of personal information, where legally permitted

Requests should be submitted in writing using the contact information below. Withdrawal of marketing consent does not affect service-related or compliance communications required by law.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available at https://VBX.ca/privacy. Continued use of our services constitutes acceptance of the updated policy.

9. Contact Us

Bittreo Technologies Ltd.
Operating as VBX
Email: support@VBX.ca
Attn: Privacy Officer
Mailing Address: 202-1807 Burrard St., Vancouver, BC, V6J 3G9